Microsoft Work Folders For Mac
- To create a new folder 'on the fly': In the Save As dialog window, once you navigate to the location where the new folder is to be created, click the New Folder button in the lower left corner of the dialog window - The window has to be expanded for the button to be available.
- Work Folders uses the following location by default:%USERPROFILE% Work Folders However, users can change the location during setup (microSD cards and USB drives formatted with the NTFS file system are supported locations, though sync will stop if the drives are removed).
- Colored Folders For Mac
- Microsoft Work Folders For Mac Windows 10
- Microsoft Work Folders Mac
- Microsoft Outlook For Mac Download
When you install the OneDrive sync app for Mac, a copy of your OneDrive is downloaded to your Mac and put in the OneDrive folder. This folder is kept in sync with OneDrive. If you add, change, or delete a file or folder on the OneDrive website, the file or folder is added, changed, or deleted in your OneDrive folder and vice versa. If that doesn't suit you, our users have ranked 16 alternatives to Work Folders and 14 are available for Mac so hopefully you can find a suitable replacement. Other interesting Mac alternatives to Work Folders are Resilio Sync (Freemium), IPFS (Free, Open Source), Yandex.Disk (Freemium) and Seafile. For those applications AutoRecover files are stored in the folders we listed above. On the Word menu, click Preferences. Under Personal Settings, click File Locations. Under File locations, click AutoRecover files, and then click Modify. Find the location where you want to automatically save files, and then click Open.
Applies to: Windows Server (Semi-Annual Channel), Windows Server 2016, Windows Server 2012 R2, Windows 10, Windows 8.1, Windows 7
This topic discusses the steps needed to deploy Work Folders. It assumes that you've already read Planning a Work Folders deployment.
To deploy Work Folders, a process that can involve multiple servers and technologies, use the following steps.
Tip
The simplest Work Folders deployment is a single file server (often called a sync server) without support for syncing over the Internet, which can be a useful deployment for a test lab or as a sync solution for domain-joined client computers. To create a simple deployment, these are minimum steps to follow:
- Step 1: Obtain SSL certificates
- Step 2: Create DNS records
- Step 3: Install Work Folders on file servers
- Step 4: Binding the SSL certificate on the sync servers
- Step 5: Create security groups for Work Folders
- Step 7: Create sync shares for user data
Step 1: Obtain SSL certificates
Work Folders uses HTTPS to securely synchronize files between the Work Folders clients and the Work Folders server. The requirements for SSL certificates used by Work Folders are as follows:
The certificate must be issued by a trusted certification authority. For most Work Folders implementations, a publicly trusted CA is recommended, since certificates will be used by non-domain-joined, Internet-based devices.
The certificate must be valid.
The private key of the certificate must be exportable (as you will need to install the certificate on multiple servers).
The subject name of the certificate must contain the public Work Folders URL used for discovering the Work Folders service from across the Internet – this must be in the format of
workfolders.<domain_name>.Subject alternative names (SANs) must be present on the certificate listing the server name for each sync server in use.
The Work Folders Certificate Management blog provides additional information on using certificates with Work Folders.
Step 2: Create DNS records
To allow users to sync across the Internet, you must create a Host (A) record in public DNS to allow Internet clients to resolve your Work Folders URL. This DNS record should resolve to the external interface of the reverse proxy server.
On your internal network, create a CNAME record in DNS named workfolders which resolves to the FDQN of a Work Folders server. When Work Folders clients use auto discovery, the URL used to discover the Work Folders server is https://workfolders.domain.com. If you plan to use auto discovery, the workfolders CNAME record must exist in DNS.
Step 3: Install Work Folders on file servers
You can install Work Folders on a domain-joined server by using Server Manager or by using Windows PowerShell, locally or remotely across a network. This is useful if you are configuring multiple sync servers across your network.
To deploy the role in Server Manager, do the following:
Start the Add Roles and Features Wizard.
On the Select installation type page, choose Role-based or feature-based deployment.
On the Select destination server page, select the server on which you want to install Work Folders.
On the Select server roles page, expand File and Storage Services, expand File and iSCSI Services, and then select Work Folders.
When asked if you want to install IIS Hostable Web Core, click Ok to install the minimal version of Internet Information Services (IIS) required by Work Folders.
Click Next until you have completed the wizard.
To deploy the role by using Windows PowerShell, use the following cmdlet:
Step 4: Binding the SSL certificate on the sync servers
Work Folders installs the IIS Hostable Web Core, which is an IIS component designed to enable web services without requiring a full installation of IIS. After installing the IIS Hostable Web Core, you should bind the SSL certificate for the server to the Default Web Site on the file server. However, the IIS Hostable Web Core does not install the IIS Management console.
There are two options for binding the certificate to the Default Web Interface. To use either option you must have installed the private key for the certificate into the computer's personal store.
Utilize the IIS management console on a server that has it installed. From within the console, connect to the file server you want to manage, and then select the Default Web Site for that server. The Default Web Site will appear disabled, but you can still edit the bindings for the site and select the certificate to bind it to that web site.
Use the netsh command to bind the certificate to the Default Web Site https interface. The command is as follows:
Step 5: Create security groups for Work Folders
Before creating sync shares, a member of the Domain Admins or Enterprise Admins groups needs to create some security groups in Active Directory Domain Services (AD DS) for Work Folders (they might also want to delegate some control as described in Step 6). Here are the groups you need:
One group per sync share to specify which users are allowed to sync with the sync share
One group for all Work Folders administrators so that they can edit an attribute on each user object that links the user to the correct sync server (if you're going to use multiple sync servers)
Groups should follow a standard naming convention and should be used only for Work Folders to avoid potential conflicts with other security requirements.
To create the appropriate security groups, use the following procedure multiple times – once for each sync share, and once to optionally create a group for file server administrators.
To create security groups for Work Folders
Open Server Manager on a Windows Server 2012 R2 or Windows Server 2016 computer with Active Directory Administration Center installed.
On the Tools menu, click Active Directory Administration Center. Active Directory Administration Center appears.
Right-click the container where you want to create the new group (for example, the Users container of the appropriate domain or OU), click New, and then click Group.
In the Create Group window, in the Group section, specify the following settings:
In Group name, type the name of the security group, for example: HR Sync Share Users, or Work Folders Administrators.
In Group scope, click Security, and then click Global.
In the Members section, click Add. The Select Users, Contacts, Computers, Service Accounts or Groups dialog box appears.
Type the names of the users or groups to which you grant access to a particular sync share (if you're creating a group to control access to a sync share), or type the names of the Work Folders administrators (if you're going to configure user accounts to automatically discover the appropriate sync server), click OK, and then click OK again.
To create a security group by using Windows PowerShell, use the following cmdlets:
Step 6: Optionally delegate user attribute control to Work Folders administrators
If you are deploying multiple sync servers and want to automatically direct users to the correct sync server, you'll need to update an attribute on each user account in AD DS. However, this normally requires getting a member of the Domain Admins or Enterprise Admins groups to update the attributes, which can quickly become tiresome if you need to frequently add users or move them between sync servers.
For this reason, a member of the Domain Admins or Enterprise Admins groups might want to delegate the ability to modify the msDS-SyncServerURL property of user objects to the Work Folders Administrators group you created in Step 5, as described in the following procedure.
Delegate the ability to edit the msDS-SyncServerURL property on user objects in AD DS
Open Server Manager on a Windows Server 2012 R2 or Windows Server 2016 computer with Active Directory Users and Computers installed.
On the Tools menu, click Active Directory Users and Computers. Active Directory Users and Computers appears.
Right-click the OU under which all user objects exist for Work Folders (if users are stored in multiple OUs or domains, right-click the container that is common to all of the users), and then click Delegate Control…. The Delegation of Control Wizard appears.
On the Users or Groups page, click Add… and then specify the group you created for Work Folders administrators (for example, Work Folders Administrators).
On the Tasks to Delegate page, click Create a custom task to delegate.
On the Active Directory Object Type page, click Only the following objects in the folder, and then select the User objects checkbox.
On the Permissions page, clear the General checkbox, select the Property-specific checkbox, and then select the Read msDS-SyncServerUrl, and Write msDS-SyncServerUrl checkboxes.
To delegate the ability to edit the msDS-SyncServerURL property on user objects by using Windows PowerShell, use the following example script that makes use of the DsAcls command.
Note
The delegation operation might take a while to run in domains with a large number of users.
Step 7: Create sync shares for user data
At this point, you're ready to designate a folder on the sync server to store your user's files. This folder is called a sync share, and you can use the following procedure to create one.
If you don't already have an NTFS volume with free space for the sync share and the user files it will contain, create a new volume and format it with the NTFS file system.
In Server Manager, click File and Storage Services, and then click Work Folders.
A list of any existing sync shares is visible at the top of the details pane. To create a new sync share, from the Tasks menu choose New Sync Share…. The New Sync Share Wizard appears.
On the Select the server and path page, specify where to store the sync share. If you already have a file share created for this user data, you can choose that share. Alternatively you can create a new folder.
Note
By default, sync shares aren't directly accessible via a file share (unless you pick an existing file share). If you want to make a sync share accessible via a file share, use the Shares tile of Server Manager or the New-SmbShare cmdlet to create a file share, preferably with access-based enumeration enabled.
On the Specify the structure for user folders page, choose a naming convention for user folders within the sync share. There are two options available:
User alias creates user folders that don't include a domain name. If you are using a file share that is already in use with Folder Redirection or another user data solution, select this naming convention. You can optionally select the Sync only the following subfolder checkbox to sync only a specific subfolder, such as the Documents folder.
User alias@domain creates user folders that include a domain name. If you aren't using a file share already in use with Folder Redirection or another user data solution, select this naming convention to eliminate folder naming conflicts when multiple users of the share have identical aliases (which can happen if the users belong to different domains).
On the Enter the sync share name page, specify a name and a description for the sync share. This is not advertised on the network but is visible in Server Manager and Windows Powershell to help distinguish sync shares from each other.
On the Grant sync access to groups page, specify the group that you created that lists the users allowed to use this sync share.
Important
To improve performance and security, grant access to groups instead of individual users and be as specific as possible, avoiding generic groups such as Authenticated Users and Domain Users. Granting access to groups with large numbers of users increases the time it takes Work Folders to query AD DS. If you have a large number of users, create multiple sync shares to help disperse the load.
On the Specify device policies page, specify whether to request any security restrictions on client PCs and devices. There are two device policies that can be individually selected:
Encrypt Work Folders Requests that Work Folders be encrypted on client PCs and devices
Automatically lock screen, and require a password Requests that client PCs and devices automatically lock their screens after 15 minutes, require a six-character or longer password to unlock the screen, and activate a device lockout mode after 10 failed retries
Important
To enforce password policies for Windows 7 PCs and for non-administrators on domain-joined PCs, use Group Policy password policies for the computer domains and exclude these domains from the Work Folders password policies. You can exclude domains by using the Set-Syncshare -PasswordAutoExcludeDomain cmdlet after creating the sync share. For information about setting Group Policy password policies, see Password Policy.
Review your selections and complete the wizard to create the sync share.
You can create sync shares using Windows PowerShell by using the New-SyncShare cmdlet. Below is an example of this method:
The example above creates a new sync share named Share01 with the path K:Share-1, and access granted to the group named HR Sync Share Users
Tip
After you create sync shares you can use File Server Resource Manager functionality to manage the data in the shares. For example, you can use the Quota tile inside the Work Folders page in Server Manager to set quotas on the user folders. You can also use File Screening Management to control the types of files that Work Folders will sync, or you can use the scenarios described in Dynamic Access Control for more sophisticated file classification tasks.
Step 8: Optionally specify a tech support email address
After installing Work Folders on a file server, you probably want to specify an administrative contact email address for the server. To add an email address, use the following procedure:
Specifying an administrative contact email
In Server Manager, click File and Storage Services, and then click Servers.
Right-click the sync server, and then click Work Folders Settings. The Work Folders Settings window appears.
In the navigation pane, click Support Email and then type the email address or addresses that users should use when emailing for help with Work Folders. Click OK when you're finished.
Work Folders users can click a link in the Work Folders Control Panel item that sends an email containing diagnostic information about the client PC to the address(es) you specify here.
Step 9: Optionally set up server automatic discovery
If you are hosting multiple sync servers in your environment, you should configure server automatic discovery by populating the msDS-SyncServerURL property on user accounts in AD DS.
Note
The msDS-SyncServerURL property in Active Directory should not be defined for remote users that are accessing Work Folders through a reverse proxy solution such as Web Application Proxy or Azure AD Application Proxy. If the msDS-SyncServerURL property is defined, the Work Folders client will try to access an internal URL that's not accessible through the reverse proxy solution. When using Web Application Proxy or Azure AD Application Proxy, you need to create unique proxy applications for each Work Folders server. For more details, see Deploying Work Folders with AD FS and Web Application Proxy: Overview or Deploying Work Folders with Azure AD Application Proxy.
Before you can do so, you must install a Windows Server 2012 R2 domain controller or update the forest and domain schemas by using the Adprep /forestprep and Adprep /domainprep commands. For information on how to safely run these commands, see Running Adprep.
You probably also want to create a security group for file server administrators and give them delegated permissions to modify this particular user attribute, as described in Step 5 and Step 6. Without these steps you would need to get a member of the Domain Admins or Enterprise Admins group to configure automatic discovery for each user.
To specify the sync server for users
Open Server Manager on a computer with Active Directory Administration Tools installed.
On the Tools menu, click Active Directory Administration Center. Active Directory Administration Center appears.
Navigate to the Users container in the appropriate domain, right-click the user you want to assign to a sync share, and then click Properties.
In the Navigation pane, click Extensions.
Click the Attribute Editor tab, select msDS-SyncServerUrl and then click Edit. The Multi-valued String Editor dialog box appears.
In the Value to add box, type the URL of the sync server with which you want this user to sync, click Add, click OK, and then click OK again.
Note
The sync server URL is simply
https://orhttp://(depending on whether you want to require a secure connection) followed by the fully qualified domain name of the sync server. For example, https://sync1.contoso.com.
To populate the attribute for multiple users, use Active Directory PowerShell. Below is an example that populates the attribute for all members of the HR Sync Share Users group, discussed in Step 5.
2020-3-19 My microsoft office products won't open, they were working fine yesterday but today I get the message 'Microsoft Office 2010 cannot be opened. Try again or repair the product in Control Panel.' When I go to the control panel it does not give the repair option. 2016-3-17 I am currently a student using Office 365 for Mac who is unable to edit documents on Microsoft Word despite being assigned a full license to Office 365 student edition. I have had access before, and I have all of my credentials. I tried to reactivate my account, and it says I can only view documents, but it won't let me edit them on Mac. I tried without success to open microsoft word, excel or any other office program but they wouldn't open. I deactivated them and was going to reinstall them but they won't load or reactivate. Why wont my mac microsoft office documents update. 2016-9-30 Word in Office 365 won't open files after updating I run Office 365 (new in 2015) on a 2015 MacbookPro with Yosemite. All worked till I downloaded an update provided by Microsoft yesterday. Excel and PPT still OK, but Word now cannot open any of my files - both.docx and.doc. With all my Office documents being available to open, work on.
Step 10: Optionally configure Web Application Proxy, Azure AD Application Proxy, or another reverse proxy
To enable remote users to access their files, you need to publish the Work Folders server through a reverse proxy, making Work Folders available externally on the Internet. You can use Web Application Proxy, Azure Active Directory Application Proxy, or another reverse proxy solution.
Colored Folders For Mac
To configure Work Folders access using AD FS and Web Application Proxy, see Deploying Work Folders with AD FS and Web Application Proxy (WAP). For background information about Web Application Proxy, see Web Application Proxy in Windows Server 2016. For details on publishing applications such as Work Folders on the Internet using Web Application Proxy, see Publishing Applications using AD FS Preauthentication.
To configure Work Folders access using Azure Active Directory Application Proxy, see Enable remote access to Work Folders using Azure Active Directory Application Proxy
Step 11: Optionally use Group Policy to configure domain-joined PCs
If you have a large number of domain-joined PCs to which you want to deploy Work Folders, you can use Group Policy to do the following client PC configuration tasks:
Specify which sync server users should sync with
Force Work Folders to be set up automatically, using default settings (review the Group Policy discussion in Designing a Work Folders Implementation before doing this)
To control these settings, create a new Group Policy object (GPO) for Work Folders and then configure the following Group Policy settings as appropriate:
'Specify Work Folders settings' policy setting in User ConfigurationPoliciesAdministrative TemplatesWindows ComponentsWorkFolders
'Force automatic setup for all users' policy setting in Computer ConfigurationPoliciesAdministrative TemplatesWindows ComponentsWorkFolders
Note
These policy settings are available only when editing Group Policy from a computer running Group Policy Management on Windows 8.1, Windows Server 2012 R2 or later. Versions of Group Policy Management from earlier operating systems do not have this setting available. These policy settings do apply to Windows 7 PCs on which the Work Folders for Windows 7 app has been installed.
See also
For additional related information, see the following resources.
| Content type | References |
|---|---|
| Understanding | - Work Folders |
| Planning | - Designing a Work Folders Implementation |
| Deployment | - Deploying Work Folders with AD FS and Web Application Proxy (WAP) - Work Folders Test Lab Deployment (blog post) - A new user attribute for Work Folders server Url (blog post) |
| Technical Reference | - Interactive logon: Machine account lockout threshold - Sync Share Cmdlets |
As one of the most widely used layout programs in the world, Microsoft Publisher is beginner-friendly and lets virtually anyone design a variety of marketing materials, whether for web or print, with ease. Its tight integration with Office 365 contributes to it being the default choice for many when it comes to design software as well.
However, if you’ve recently switched from Windows to macOS and installed your favorite Microsoft software, you might have noticed that Microsoft Publisher is absent from the app lineup. How could it be? Is there Microsoft Publisher for Mac? What do you use instead? Let’s tackle all these questions one by one.
Get a publisher for Mac
Microsoft Publisher doesn't work on Mac. But Setapp has an equivalent you'll enjoy even more.
Is Microsoft Publisher Available For Mac?
As the official Microsoft website indicates, Microsoft Publisher is available for PC only. But that shouldn’t discourage you in the slightest. After all, the key value proposition of Mac computers for the longest time has been an abundance of platform-specific designer-oriented software.
Not only there are lots of Microsoft Office Publisher for Mac alternatives — they are generally more intuitive and focused on getting the professional results you’re after much quicker. One of those options is Swift Publisher.
Create astonishing layouts with Swift Publisher
What exactly is a Microsoft Publisher equivalent for Mac? There are certain tools that professional full-time designers use to create books, brochures, and printed advertising. Generally, those apps take hundreds of hours to get a grasp of and, even after you know them quite well, demand highly manual approach.
The other category is software that was designed to be accessible to all but which is still capable of producing results comparable to its highly specialized alternatives. Microsoft Publisher is certainly in that camp, and by comparison Swift Publisher is too.
Swift Publisher provides you with more than 200 templates and 2,000 royalty-free images right from the get-go. That means whatever you’re planning to design has already been mocked up and all the media you need can be found with a quick search, no purchase required. To accompany all these images, the app also features a built-in image editor you can use for any necessary cropping or color correction.
Building out your perfect layout in Swift Publisher couldn’t be easier, as the whole interface operates on a drag-and-drop functionality to enable you to fill out the template you’ve chosen at the beginning. You can also change the template yourself with regards to master pages, grid, layers, tables, and more.
Unlike Microsoft Publisher for Mac, Swift Publisher makes full use of programmatic automation. For example, calendars and maps can be added in a snap to show timelines and directions. Contacts can be merged from Apple’s address book to output names. New QR codes can be created to guide users to where you want them to go.
Printing your project has never been so seamless. First you can simply check out the layout integrity by printing samples at home. When you get the result you seek, the app allows you to further fine-tune the image resolution, mark bleeds, and customize anything else required by your commercial printer.
As you can see, the inability to download Microsoft Publisher for Mac shouldn’t affect your need for creative expression. Swift Publisher offers all the same features and more in a convenient and approachable package. But what if someone sends you a .pub file Macs can’t read? There are workarounds for that too.
How to open a .pub file on Mac
It’s true that none of Mac’s default apps would be able to peek inside the .pub file, simply due to how closed the Microsoft ecosystem is. Luckily, it’s less of a problem than it seems. A quick search online would reveal dozens of free web-based utilities that instantly convert Publisher files into PDFs, .docx, .png, etc.
Alternatively, you can notify your team of your recent switch to Mac and ask them to export .pub files to another format before those get sent to you. To do that your colleagues need to go to File then Export then Change File Type.
Oct 31, 2015 We have a couple users using Office 365 and have downloaded Office 2016 on their Mac. Of these four users, only one is having the issue that is not allowing them to edit documents. For about three weeks they were fine but recently started getting a. Microsoft office your account doesn't allow editing on a mac. Fix: Account Doesn’t Allow Editing on a Mac If the issue is with your Computer or a Laptop you should try using Reimage Plus which can scan the repositories and replace corrupt and missing files. This works in most cases, where the issue is originated due to a system corruption. Feb 15, 2018 Restarting the Mac is not a perminant resolution/fix. My issue is that this 'doesn't allow editing on a Mac' comes up mid editing excel, word, and power point files causing the LOSS of all work up to that point as the file can no longer be manually (nor auto) saved. Mac OS: Sierra 10.12.6.
Most likely, all the files you’ll receive from now on would be PDFs, which are great, as they preserve the original formatting and can be read by any program that deals with images. With time though you’ll accumulate hundreds of PDF files, so your new challenge will be finding the right one quickly. That’s where PDF Search comes to the rescue.
Microsoft Work Folders For Mac Windows 10
PDF Search is a powerful utility that first and foremost scans any folder on your Mac for PDFs and then uses its AI capabilities to work with them. This app doesn’t just search for a word or phrase, it also analyzes a variety of semantically related keyword combinations and ranks them for you based on relevancy. To put it simply, there has never been an easier way to scan your PDFs.
Publish flawless blog posts on the web
A frequently overlooked use case for Microsoft Publisher is laying out the content for the web, whether it’s a website or complex blog post. And while Swift Publisher is an outstanding tool for creating website mockups, it would seem like an overkill to use it for putting together a blog post. Working with a single-focused app like MarsEdit would make so much more sense.
MarsEdit is a lightweight but powerful all-in-one blogging tool. It lets you write, design, optimize, and publish outstanding blog posts using a single workflow, and thus saving time and reducing errors in the process.
When you launch MarsEdit for the first time, it asks you to connect the app to your existing blog, whether it’s on WordPress, Blogger, or Medium, so that it can import all your settings and configure the publishing process. That way, MarsEdit will also become the de facto content management system for your website — good news, as keeping a copy of all your posts offline certainly wouldn’t hurt.
Writing in MarsEdit is straightforward and distraction-free. You can also copy-paste the text from another app and even retain the Markdown syntax. Adding media is the best part, as MarsEdit supports a variety of image engines and even features a native image editor to make all the necessary adjustments. What’s more, the app can scan Apple Photos, Lightroom, and Aperture for images.
You also get to preview your resulting blog posts in real time to avoid after-the-fact tweaking. And if you have more than one blog, you can simply switch accounts right within the app. To sum up, MarsEdit is exactly the software web publisher have been waiting for.
Microsoft Work Folders Mac
Despite the fact that there is no official Microsoft Office Publisher for Mac, you’re not left without tools that are crucial for your success. In fact, it’s quite the opposite. Lots of apps could be called a Microsoft Publisher equivalent for Mac. Your task now is to pick the right one. Swift Publisher does the trick for nearly every use case, and MarsEdit effortlessly takes care of your web presence. Finally, in case someone sends you .pub file Macs can’t read, search online to resolve the issue and try any top-ranking utility.
Microsoft Outlook For Mac Download
Best of all, both Swift Publisher and MarsEdit are available for a free trial through Setapp, a platform of more than 150 highly acclaimed apps and utilities for any situation. Become a Setapp Member today and download Microsoft Publisher for Mac alternatives you want to try.